Port 123 - NTP

nmap -sU -sV --script "ntp* and (discovery or vuln) and not (dos or brute)" -p
123 $IP

ntpq -c sysinfo $IP